Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: b1qho6hpV+eE6eBFg2h+5De2fSWr5ZnawihgKGMKYlM=
Subject key identifier: 22:EC:B9:27:A1:1B:5E:64:C0:71:E2:74:C6:02:39:72:A8:15:3B:AF
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 019D27A9044FE05F89749DE5A4B4FAAE1463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0C79
Signing time: Thu 26 Mar 2026 01:01:21 +0000
Manifest this update: Thu 26 Mar 2026 01:01:21 +0000
Manifest next update: Fri 27 Mar 2026 01:01:21 +0000
Files and hashes: 1: OG9V497FCoHNGnPc_DbNqTEvF0Q.roa (hash: KoQeTtNBbhDRzvLnCdWBbN4ahOwIByARYlxscPU0UV4=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: ls0l5eVRAYpck6Ojxq6z/nPWPYCu8Xi9ZoY/JTwdzpY=)
3: wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa (hash: 3unU8/VgG8FeuLF+n9dZ02OE5LTcBxSZEPgG5bjCfR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:04:4f:e0:5f:89:74:9d:e5:a4:b4:fa:ae:14:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Mar 26 01:01:21 2026 GMT
Not After : Mar 27 01:01:21 2026 GMT
Subject: CN=22ecb927a11b5e64c071e274c6023972a8153baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:6d:9f:bb:07:06:3a:2b:8e:a9:2e:6d:7c:
b8:c4:b2:26:8e:ad:49:47:ba:df:dd:b2:e7:e1:f0:
49:c2:f5:e7:10:2b:f8:3c:db:8e:ed:67:d1:a8:f1:
29:d9:48:b9:11:04:4b:70:27:0a:4d:73:58:c1:68:
14:28:56:d0:09:b8:d6:28:28:cf:4c:b1:c1:39:a4:
c5:94:22:40:f1:4f:68:ba:34:66:c9:24:48:1c:69:
bd:02:87:df:c2:d4:1c:fc:b1:76:4d:d7:66:c8:f4:
a0:55:e9:42:30:74:50:5b:3d:cf:51:1e:83:2a:d7:
14:a2:1d:d9:81:46:8e:04:39:87:15:32:00:db:17:
23:4d:8f:2e:e0:cd:74:b3:ed:44:ea:e4:1e:25:70:
2b:40:62:98:b0:01:6b:57:40:29:7a:c4:fc:6e:b6:
5c:63:47:5d:8f:31:f8:88:ef:c9:4f:db:90:6d:66:
02:33:0f:45:e6:66:28:3c:12:67:f1:ca:36:df:28:
6e:ba:2d:31:48:ad:b8:f5:6e:34:76:42:fd:ab:a3:
e3:14:76:8c:d2:6d:6f:5b:4a:9b:dd:30:ac:8a:10:
79:e0:2b:be:9c:8a:d4:8a:19:8d:e6:94:f2:3f:80:
d5:a9:ad:f5:35:cc:40:de:81:f0:d6:df:d9:64:3f:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EC:B9:27:A1:1B:5E:64:C0:71:E2:74:C6:02:39:72:A8:15:3B:AF
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b3:36:fa:bf:0b:85:92:f3:38:ac:63:53:82:10:71:fb:56:
f7:bd:d2:3a:2b:1a:69:db:dc:43:6a:99:a5:f8:84:1f:b6:a7:
1c:83:43:91:2a:ee:59:3d:15:1f:e0:65:54:9a:b5:d1:98:ce:
c8:35:5a:67:5b:18:90:47:f3:9f:89:ee:dc:c6:6e:fc:3d:fe:
2d:ae:a3:f3:50:4d:82:df:e5:08:96:7a:e4:25:8c:8f:ab:c0:
71:12:3a:a3:34:9e:e1:9e:4a:25:a3:ff:02:2f:1f:7f:3b:4e:
ef:42:a8:41:2d:2b:47:8e:59:80:6c:59:73:1b:24:df:9a:c9:
37:42:05:fc:5d:6f:dc:1b:61:fc:c3:cd:8c:04:27:e5:ec:6b:
51:a0:5e:d1:a7:2d:20:33:80:18:e2:fb:9b:91:49:9d:a8:45:
b7:5c:95:68:34:02:f4:3a:b3:2e:b3:a8:54:f5:7c:ab:63:6d:
cd:d6:b0:53:65:04:42:85:82:38:11:54:2a:b1:8b:dd:d6:31:
79:9c:ea:10:11:74:2c:f6:55:60:d1:a6:48:5f:fc:7e:dc:6d:
24:cd:68:86:e1:a1:a5:c7:be:4c:3e:f8:ae:36:53:a6:8f:20:
2f:0d:98:6d:fd:18:e9:ed:c0:0f:08:f2:46:29:55:74:01:b8:
22:49:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:00:29 2026 by rpki-client